Rewriting shib headers as proxy request headers: Session ID?

[Cantor, Scott]

> I feel like the issue has something to do with when the session ID becomes
> available, and that for some reason other attributes are set before
> “RequestHeader set” but not the session ID.

It's set at the same time, they all get set in the same step. If you want to be absolutely pedantic testing it, it sets Shib-Application-ID in the immediately preceding line of code, so it's not possible for one to be set and not the other.

The rest are set just after that.

Module order is absolutely an issue with all this and is absolutely not controllable any longer in Apache 2.x, so that blew up a lot of behaviors that depended on module order, which 1.3 allowed control over.

My guess is your mod_headers logic is running too soon, but that only applies if none of them are being rewritten.

-- Scott